Compliance

• Manage and/or maintain the security posture and authorization lifecycle for multiple cloud and on-premises information systems
• Collaborate with stakeholders to attain information necessary for continuous monitoring activities, including vulnerability scan analysis, audit log reviews, and support during security control assessments
• Develop, maintain, and update security documentation, including System Security Plans (SSPs), Plan of Action & Milestones (POAMs), network architectures
• Collaborate with stakeholders to develop program/project cyber policies
• Familiarization with NIST 800 series documentation, (NIST 800-171, GD and GDIT Cybersecurity policies)
• Possess the ability to interpret vulnerability scan reports and coordinate with program stakeholders to remediate actions to closure
• Develop presentations and brief findings as needed
• Support incident response, contingency planning, and disaster recovery efforts as needed
• Serve as the program ISSO and represent the interests of the system owners, developers, and administrators
• Interface with auditors and assessors during security control assessments and authorization events.

IT Risk and Compliance Specialist

PAC Compliance Consultant

Senior IT Risk and Compliance Specialist

Compliance Coordinator

Compliance Fair Lending Specialist